Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
DavidPiper
74 days ago
|
parent
|
context
|
favorite
| on:
YouTube embeds are heavy and it’s fixable
This seems to be allowing unsafe script injection from ONLY certain whitelisted urls, presumably excluding the url globs required for the ads. Haven't tested it, and not sure the full extent of pshc's sibling response either.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: